Remote file inclusion

2007-05-0818:19:00

PRIOn knowledge base

www.prio-n.com

8.1 High

AI Score

Confidence

Low

0.067 Low

EPSS

Percentile

93.8%

JSON

PHP remote file inclusion vulnerability in common.php in E-GADS! before 2.2.7 allows remote attackers to execute arbitrary PHP code via a URL in the locale parameter.

CPENameOperatorVersion
e-gadsle2.2.6
e-gadseq2.2.1
e-gadseq2.2.4
e-gadseq2.2.2
e-gadseq2.2.5
e-gadseq2.2.3

Name	Operator	Version
e-gads	le	2.2.6
e-gads	eq	2.2.1
e-gads	eq	2.2.4
e-gads	eq	2.2.2
e-gads	eq	2.2.5
e-gads	eq	2.2.3

References

osvdb.org/35773

secunia.com/advisories/25104

www.securityfocus.com/bid/23817

www.vupen.com/english/advisories/2007/1665

exchange.xforce.ibmcloud.com/vulnerabilities/34073

sourceforge.net/project/shownotes.php?group_id=88942&release_id=533122

www.exploit-db.com/exploits/3846